My dmesg runneth over

[Herodot]

Hi,

dmesg contains kernel output, right? This means that output from iptables is also written to dmesg, which means that the interesting parts -- the boot messages -- are quickly discarded. Is this done by the kernel directly or by some logger?

How can I get iptables to write its stuff somewhere else? Or maybe: how can I expand the size of dmesg, and get iptables to not write all those hits on port 137 from windows machines?

[rewt]

Have you checked if they're in a log file in /var?
/var/messages and /var/warn would seem to be pretty standard across linux - at least that's true for SuSE